This page uses extracted PDF text. Text can misread numbers, dates or table columns. Check the PDF before quoting or interpreting it. Redacted areas remain redacted.
RFP Name RFP 20-xxxx-xxxx
referenced for safeguarding data during
transmission.
C.7 Does the proposed solution uniquely identify and authenticate ☒ Yes Please provide additional information below:
all users (no anonymous access)? ☐ No All users are uniquely identified and authenticated
using unique usernames, complex passwords, and
multi-factor authentication. Account sharing is
prohibited, and anonymous access is not permitted.
C.8 Will City data be encrypted at rest in the proposed solution? ☒ Yes Please provide additional information below:
☐ No Data will be encrypted at rest using the AES-256
encryption algorithm.
C.9 Does the proposed system/application maintain built-in high- ☒ Yes Please provide additional information below:
availability features? ☐ No
C.10 Does organization’s proposed solution include disaster ☒ Yes Please provide additional information below:
recovery features and recommended practices specific to the ☐ No The solution includes a formal, documented, and
solution to allow for the continuation of operations in the annually tested disaster recovery plan with
event of a disaster? notification, recovery, and reconstitution
procedures. Backups are performed regularly and
stored in geographically separated AWS data
centers. Alternate processing and storage sites are
established, and recovery objectives are defined.
Business continuity and incident response plans are
coordinated and maintained.
C.11 Is the organization compliant with legal restrictions on the use ☒ Yes Please provide additional information below:
of copyright material, ensuring that only software developed ☐ No The organization uses software in accordance with
by the organization, or licensed or provided by the developer contract agreements and copyright laws, tracks
to the organization is used for customer’s systems? software usage for license compliance, and restricts
installation to authorized software only. Policies
and controls ensure only organization-developed or
properly licensed software is used for customer
systems. Peer-to-peer file sharing is controlled to
prevent unauthorized distribution.
Page 12 of 19Jump to an indexed page (163 of 163)